Privacy

Privacy Policy

GateFlow is local-first. Your events run in the app on your own computer, and GateFlow hosts only what is needed for your account, payments, and licences. This page summarises what stays with you and what we hold.

What stays on your computer

Event data, attendee information, QR payloads, and scan history stay on your computer by default and are never uploaded to GateFlow. QR codes contain no personal data; each one carries an anonymous 32-character code.

What GateFlow hosts

We hold your account identity (name and email), payment records, licence and device-registration metadata, and the security and audit records needed to protect the service. Device registration uses machine identifier hashes, not hardware serials.

Payment processing

Checkout is handled by Paymob. GateFlow never sees card numbers. We store the payment records needed to issue your licence and keep your receipts available on your account.

Sign-in providers and security services

You can optionally sign in with Google or Microsoft; GateFlow receives only your name and email address from the provider. The account pages use Cloudflare Turnstile to block automated abuse and load fonts from Google Fonts; both services see standard request metadata (such as your IP address) but no GateFlow account data.

How we use this information

We use it to maintain account access, issue licence keys and signed licence files, apply capacity upgrades and renewals, support device transfers and remote recovery, and answer support requests. It is not sold for marketing.